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- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 
-* Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 

Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)[X] Responsive to communication(s) filed on 15 April 2004 . 
2a)D This action is FINAL. . 2b)E3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) ^3 Claim(s) 1-11 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) Q Claim(s) is/are allowed. 

6) El Claim(s) 1-11 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) S The drawing(s) filed on 15 April 2004 is/are: a)S accepted or b)Q objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. ^ 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

Priority 

1 . Applicant's claim for the benefit of a prior-filed application under 35 U.S.C. 
119(a)-(e) or under 35 U.S.C. 120, 121, or 365(c) is acknowledged. Priority is claimed 
under Applications 1 01 62 584.7 and 1 0 1 51 1 39.6. 

Double Patenting 

2. Claims 1-1 1 are provisionally rejected under the judicially created doctrine of 
obviousness-type double patenting as being unpatentable over claims 1-14 of 
copending Application No. 10/827,913. Although the conflicting claims are not identical, 
they are not patentably distinct from each other because the cryptographic algorithm for 
an encryption of a message, a decryption of a message, a signature generation from a 
message or a signature verification calculation from a message found in the instant 
application is analogous to cryptographic algorithm against an error attack on a crypto- 
processor performing the cryptographic algorithm of the copending one and both use 
such algorithm to verify if the input data has been changed or modified. 

3. . "A later patent claim is not patentably distinct from an earlier patent claim if the 
later claim is obvious over, or anticipated by, the earlier claim. In re Lonqi . 759 F.2d at 
896, 225 USPQ at 651 (affirming a holding of obviousness-type double patenting 
because the claims at issue were obvious over claims in four prior art patents); In re 
Berg . 140 F.3d at 1437, 46 USPQ2d at 1233 (Fed. Cir. 1998) (affirming a holding of 
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obviousness-type double patenting where a patent application claim to a genus is 
anticipated by a patent claim to a species with that genus). "ELI LILLY AND COMPANY 
v BARR LABORATORIES, INC., United States Court of Appeals for the Federal Circuit, 
ON PETITION FOR REHEARING EN BANC (DECIDED: May 30, 2001). 

4. "Claim 12 and Claim 13 are generic to the species of invention covered by claim 
3 of the patent. Thus, the generic invention is "anticipated" by the species of the 
patented invention. Cf., Titanium Metals Corp. v. Banner, 778 F.2d 775, 227 USPQ 773 
(Fed. Cir. 1985) (holding that an earlier species disclosure in the prior art defeats any 
generic claim) 4. This court's predecessor has held that, without a terminal disclaimer, 
the species claims preclude issuance of the generic claim. In re Van Ornum, 686 F.2d 
937, 944, 214 USPQ 761, 767 (CCPA 1982); Schneller, 397 F.2d at 354. Accordingly, 
absent a terminal disclaimer, claims 12 and 13 were properly rejected under the 
doctrine of obviousness-type double patenting." (In re Goodman (CA FC) 29 USPQ2d 
2010(12/3/1993). 

5. Pursuant to USC 131, claims 1-11 are presented for examination. 

6. Claims 1-11 are pending. 

Claim Rejections • 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claim 1-11 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Shamir (US Patent No. 5,991,415) and further in view of Boneh et al. (US Patent 

No. 6,965,673). ( 

Regarding claims 1 . 7 and 1 1 . Shamir , discloses the method and apparatus for 
protecting an exponentiation calculation wherein the exponentiation calculation is 
performed within a cryptographic algorithm for an encryption of a message, a 
decryption of a message, a signature generation from a message or a signature 
verification calculation from a message, the method comprising: following the 
combining step, verifying the result of the exponentiation calculation by means of 
a verifying algorithm, which differs from the combination algorithm, using the first 
prime number and/or the second prime number, the verifying algorithm providing 
a predetermined result if the combining step has been performed correctly (col. 5 
lines 1-17 and col. 6 lines 17-52). 

Shamir is silent in disclosing calculating the first auxiliary quantity using 
the first prime number as the module and using the message and 
calculating the second auxiliary quantity using the second prime number 
as the module and using the message and then combining the first 
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auxiliary quantity and the second auxiliary quantity using a combination 
algorithm to obtain a result of the exponentiation calculation (by means of 
the Chinese remainder theorem using two prime numbers forming 
auxiliary modules for calculating auxiliary quantities which may be joined 
to calculate a modular exponentiation for a module equal to the product of 
the auxiliary quantities) and then suppressing an output of the result of the 
exponentiation calculation if the verifying step shows that the verifying 
algorithm provides a result other than the predetermined result, however 
Boneh does disclose such limitations in column 4 lines 58-65 and column 
7 lines 53-57. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to combining the first auxiliary quantity and the 
second auxiliary quantity using a combination algorithm to obtain a result 
of the exponentiation calculation - the modulus, since Boneh states in the 
abstract that comparing a correct signature and an erroneous signature of 
the same message permit the modulus to be easily obtained, suppressing 
or discarding erroneous information prevents a hacker or malicious user 
from cracking the system and signing documents without prior knowledge 
of the secret exponents (column 4 lines 58-65 and column 7 lines 53-57 of 
Boneh). 
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Regarding claim 2 . Shamir , discloses method as claimed in claim 1, wherein in 
addition to the result of the exponentiation calculation, the verifying algorithm 
uses as input data contents of a memory location at which the first auxiliary 
quantity, the second auxiliary quantity, the first prime number or the second 
prime number are stored (col. 5 lines 1-17 and col. 6 lines 17-52). 

Regarding claim 3 . Boneh . discloses method as claimed in claim 1 , wherein the 
exponentiation calculation is an RSA encryption, an RSA decryption, an RSA 
signature calculation or an RSA signature verification calculation (col. 4 lines 58- 
65). 

Regarding claim 4 , Boneh . does not explicitly disclose the combination algorithm 
is the Garner algorithm, the algorithm is implicitly disclosed because in the 
Garner algorithm a "large" modular exponentiation is divided into two "small" 
modular exponentiations in the latter algorithm, the results of which are then 
united in accordance with the Chinese remainder theorem. Therefore, although 
not explicitly disclosed the implicit disclosure is clear due to the disclosure of the 
Chinese remainder theorem in column 4 lines 58-65 of Boneh. 

Regarding claim 5 . Shamir , is silent in disclosing a modular reduction of the 
result of the exponentiation calculation with the first prime number and/or the 
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second prime number as the module however Boneh does disclose obtaining the 
modulus by means of a first and second signature (col. 4 lines 58-65 of Boneh). 

Regarding claim 6 . Shamir , discloses method as claimed in claim 1 , wherein the 
first auxiliary quantity is calculated as follows: sp:=m.sup.dp mod p; wherein the 
second auxiliary quantity is calculated as follows: sq:=m.sup.dq mod q; wherein 
the combination algorithm is defined as follows: s=sq+{[(sp-sq).multidot.qinv- 
]mod p}.multidot.q; and wherein the verification algorithm is defined as follows: s 
mod p=sp; and/or s mod q=sq; and wherein the predetermined result is an . 
equality condition in the verification algorithm (Figure 2 block [30 and 36] col. 4 
lines 50-59 col. 6 lines 35-52 and col. 7 lines 22-29). 

Regarding claim 8 . Boneh . discloses method as claimed in claim 7, wherein a 
random number is used for verifying auxiliary exponents (col. 4 lines 58-65 - the 
claimed auxiliary exponents pertain to the RSA algorithm with the Chinese 
Remainder Theorem). 

Regarding claim 9 . Boneh . discloses method as claimed in claim 7, wherein a 
prime number is used as input data for verifying the first prime number and the 
second prime number (col. 4 lines 58-65). 
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Regarding claim 10 . Boneh . discloses method as claimed in claim 9, wherein the 
prime number has a number of digits which is smaller than the number of digits 
of the first prime number and of the second prime number (col. 4 lines 58-65). 

Conclusion 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Chinwendu C. Okoronkwo whose telephone number is 
(571) 272 2662. The examiner can normally be reached on MWF 9:30 - 7:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on (571) 272 4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Sen/ice Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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